Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-7439

Опубликовано: 16 апр. 2015
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:x.org:libx11:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.1:rc1:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.1:rc2:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.1.99.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.1.99.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3.4:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3.5:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3.6:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3.99.901:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3.99.902:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.3.99.903:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.4.99.901:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.4.99.902:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.5.0:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.5.99.901:*:*:*:*:*:*:*
cpe:2.3:a:x.org:libx11:1.5.99.902:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:x.org:x11:6.0:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.3:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.4:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.5.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.6:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.7:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.8.0:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.8.1:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.8.2:*:*:*:*:*:*:*
cpe:2.3:a:x.org:x11:6.9:*:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.01877
Низкий

7.5 High

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu логотип

CVE-2013-7439

ubuntu
почти 11 лет назад

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

redhat логотип

CVE-2013-7439

redhat
почти 13 лет назад

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

debian логотип

CVE-2013-7439

debian
почти 11 лет назад

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen mac ...

suse-cvrf логотип

SUSE-SU-2015:1334-1

suse-cvrf
больше 10 лет назад

Security update for xorg-x11-libX11

github логотип

GHSA-rq5m-5v65-q84q

github
больше 3 лет назад

Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

EPSS

Процентиль: 83%
0.01877
Низкий

7.5 High

CVSS2

Дефекты

CWE-189